What is CVE-2025-32807?

CVE-2025-32807 is a medium-severity vulnerability in Fusiondirectory, classified under CWE-24. CVSS score: 5.3/10. Published 2025-04-11.

How severe is CVE-2025-32807?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Fusiondirectory

CVE-2025-32807

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configurations) via the icon parameter of a GET request to geticon.php.

EPSS: 0.005 (40.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Fusiondirectory — versions 0

Weakness classification (CWE)

CWE-24

References

cve@mitre.org
cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2025-32807?: CVE-2025-32807 is a medium-severity vulnerability in Fusiondirectory, classified under CWE-24. CVSS score: 5.3/10. Published 2025-04-11.
How severe is CVE-2025-32807?: Medium severity. CVSS v3 base score is 5.3 out of 10.